
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233322e302f32342d3234203d3e203137363232.roa
File: 3130312e35322e3233322e302f32342d3234203d3e203137363232.roa (raw, json)
Hash identifier: CQm+Mj46M24komVv4nE3DGdbjWXAnRA8G8d5ePJt7V8=
Subject key identifier: 86:14:6A:65:FA:98:66:5F:EC:AA:DA:C3:08:11:31:8F:F6:E3:8D:E9
Certificate issuer: /CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Certificate serial: 6540B3EE220FEC1FD6CDAB5EFC482C2C8A5964C0
Authority key identifier: 68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233322e302f32342d3234203d3e203137363232.roa
Signing time: Fri 15 May 2026 08:45:09 +0000
ROA not before: Fri 15 May 2026 08:40:09 +0000
ROA not after: Fri 14 May 2027 08:45:09 +0000
asID: 17622
IP address blocks: 101.52.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:40:b3:ee:22:0f:ec:1f:d6:cd:ab:5e:fc:48:2c:2c:8a:59:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6826FD4A927A10A458BBFA7C6B9EE467EE15B97B
Validity
Not Before: May 15 08:40:09 2026 GMT
Not After : May 14 08:45:09 2027 GMT
Subject: CN=86146A65FA98665FECAADAC30811318FF6E38DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:7a:49:13:83:b9:b8:3d:59:dc:2b:52:ba:
18:63:69:5c:64:37:49:f5:1d:64:0f:e1:f9:2b:8c:
91:72:6a:68:89:b6:7b:85:1a:99:ca:c8:5e:3f:df:
2f:74:f4:08:85:89:b1:96:54:f2:1a:b7:fa:3f:eb:
b6:6b:82:31:e9:23:1c:9e:92:fe:24:ec:38:12:97:
fa:66:5b:c8:eb:88:8b:06:21:c6:17:16:68:94:13:
af:91:ff:44:69:b7:d8:7c:84:38:c7:14:c2:e0:cc:
e0:68:4f:82:84:db:e8:68:e3:d6:b0:ae:22:4f:dd:
27:7a:d4:ee:9f:44:48:5c:44:67:9d:59:e0:2e:07:
7c:66:0d:c7:ce:7a:25:55:4b:7b:b0:59:c8:da:1a:
86:c7:55:1c:6a:9b:17:61:ed:fb:64:fd:c3:c1:9c:
ad:1d:5d:e3:15:87:e8:95:b0:90:bc:7b:eb:7c:25:
77:31:6d:29:22:42:38:83:19:75:03:ef:11:12:88:
06:4c:f2:d5:89:f9:17:b9:90:b3:7f:6b:8f:42:a1:
4c:fd:5c:8d:c8:94:47:ad:56:14:46:45:27:41:6e:
12:ce:af:33:13:f9:6f:08:00:b4:5f:47:a9:bb:e3:
d8:e3:82:ef:a3:33:32:5a:7d:14:ce:77:fc:00:b8:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:14:6A:65:FA:98:66:5F:EC:AA:DA:C3:08:11:31:8F:F6:E3:8D:E9
X509v3 Authority Key Identifier:
keyid:68:26:FD:4A:92:7A:10:A4:58:BB:FA:7C:6B:9E:E4:67:EE:15:B9:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6826FD4A927A10A458BBFA7C6B9EE467EE15B97B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121428482/0/3130312e35322e3233322e302f32342d3234203d3e203137363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.52.232.0/24
Signature Algorithm: sha256WithRSAEncryption
38:bb:bc:e6:fb:59:a6:98:40:c7:d6:47:1f:21:2b:cc:30:99:
9a:09:81:05:d9:d5:4f:2d:b3:ca:94:9a:e0:7c:47:bb:26:77:
2e:cd:ad:c4:62:5f:85:9d:aa:43:24:2a:3c:89:64:01:fb:8e:
4a:91:44:7e:d1:c9:e3:73:3b:39:00:c6:27:ff:9c:4b:f1:e2:
80:60:ed:4f:b6:dc:fb:4f:5c:d8:75:a1:ff:90:22:27:10:da:
55:90:be:4e:7a:77:c6:f0:29:69:8c:a0:fa:99:b2:ee:f0:57:
8a:76:1b:31:7d:82:7d:bd:bc:50:13:81:10:bb:3b:43:ae:55:
d7:c9:4d:a9:d5:b7:ee:ce:3c:e8:7b:d7:6d:3d:1c:ac:1c:fb:
e4:ca:67:c2:9b:c9:b7:e2:62:83:96:45:91:7e:36:d2:28:d4:
0b:10:e4:f8:3e:a4:d7:29:4c:b6:7f:c5:14:26:c3:c5:b4:2d:
48:63:1f:59:4e:07:fc:ad:f0:5b:4b:8b:f3:6d:3c:5f:66:e7:
e5:60:81:21:4f:20:f2:8d:d0:94:39:f6:54:a1:f9:62:f3:23:
01:11:41:ef:6a:84:6e:f6:76:88:ea:b8:e3:1b:41:45:03:e7:
8d:52:32:ae:87:19:fc:a0:86:fb:96:b7:15:fd:ec:ce:d1:42:
ab:10:cf:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:20 2026 by rpki-client